Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/291518cf-f408-3026-8202-35b6ee6fbf94.roa
File: 291518cf-f408-3026-8202-35b6ee6fbf94.roa (raw, json)
Hash identifier: McJ9UFWgJsFju5T2xJuH0efFTbwZ0p5dccNOI89bJSA=
Subject key identifier: 42:1B:CB:51:5F:28:08:EB:5D:8B:7C:08:B3:37:22:C9:42:71:AC:8B
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC08889D2437107E51580
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/291518cf-f408-3026-8202-35b6ee6fbf94.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 81
IP address blocks: 198.86.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c0:88:89:d2:43:71:07:e5:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=9380b20f-e241-45fd-8c02-c97d64650aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:c9:cf:7d:e7:8a:fa:94:ef:55:63:19:62:
f0:ed:7c:b9:9f:5c:4d:7e:aa:72:28:25:73:ca:14:
b7:73:8e:88:cb:7f:a2:db:a5:08:78:4d:e8:24:80:
3a:1f:fc:85:7d:8d:2e:e4:db:39:29:86:4a:04:50:
88:08:9f:64:1f:33:06:39:ca:82:59:08:04:9c:56:
0a:ab:6a:0a:9c:5c:29:8b:cd:42:9a:1c:e9:58:ff:
ca:e2:cb:cc:95:45:15:87:0c:a9:6a:4f:d4:52:a5:
ca:01:4e:60:05:b7:fd:47:e7:63:10:5c:ca:90:7f:
ca:00:4b:f9:38:42:33:72:54:6a:39:11:a3:fb:fc:
58:f0:ae:1b:54:78:e7:09:43:1f:f7:e6:c8:a0:75:
e1:50:b3:f2:8d:0a:6c:8f:83:6b:dc:57:73:de:5e:
6a:71:cd:d3:e8:ba:57:d2:03:d4:7b:a3:67:74:55:
e4:63:26:78:e1:a5:7d:fa:55:cc:10:77:42:b0:97:
74:0e:2c:60:b5:56:17:0f:3b:0b:f0:f1:60:77:bf:
82:6b:4c:30:71:e4:fe:c2:19:fa:cd:5d:11:e6:c1:
18:2c:ef:39:98:ad:ea:77:27:03:26:1a:83:3d:be:
2f:e0:58:b0:38:5c:73:69:d0:a3:02:1b:3b:1f:05:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:CB:51:5F:28:08:EB:5D:8B:7C:08:B3:37:22:C9:42:71:AC:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/291518cf-f408-3026-8202-35b6ee6fbf94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:82:b6:ba:c8:af:36:1a:29:58:6f:ae:07:8d:42:88:af:51:
30:64:6a:b4:c6:ed:18:0a:b2:84:3e:11:90:b6:32:a7:73:6a:
4c:57:b7:c5:58:71:3a:26:1e:f7:b6:ed:d6:f0:0d:b4:d2:f1:
98:50:ae:8a:17:d9:ea:c7:8d:9b:ce:b2:41:d5:fe:6b:73:d7:
ef:7b:cf:9a:af:03:95:1c:df:d2:e1:c7:68:6d:6f:8d:13:4a:
0f:c4:97:b5:3d:b4:bf:6c:06:09:12:6e:fb:33:ba:5b:89:cc:
98:e4:43:3c:87:b4:a9:4f:b8:40:c4:52:3a:e5:99:4f:2b:29:
c3:f1:b4:bb:02:d1:c7:8a:99:05:79:6c:6f:13:0c:af:9e:93:
1e:24:8e:23:78:fa:ad:e8:78:39:31:28:da:46:f7:b4:b0:35:
5e:c4:73:80:4e:8f:17:7e:77:ae:7f:78:aa:c2:d5:69:84:37:
fc:96:2a:a1:82:f8:7f:dc:ed:ae:61:6a:38:f9:c1:77:ef:64:
97:56:39:55:b1:70:03:64:3e:e1:11:c1:9e:0f:d6:af:91:cf:
5b:25:6c:fb:47:aa:fc:a8:a8:d9:5e:73:99:b3:92:6d:32:5a:
95:9f:05:38:83:a8:1b:ec:6b:e7:c9:be:37:7e:4d:a9:45:24:
99:2f:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:57 2024 by rpki-client on console-ams.rpki-client.org